Skip to main content

Nshield 5c Firmware CVE-2025-59698

| EUVDEUVD-2025-200256 MEDIUM
Generation of Incorrect Security Tokens (CWE-1270)
2025-12-02 cve@mitre.org
Information Disclosure Nshield 5c Firmware Nshield Connect Xc Mid Firmware Nshield Connect Xc Base Firmware Nshield Connect Xc High Firmware Nshield Hsmi Firmware
6.8
CVSS 3.1 · Vendor: mitre
Share

Severity by source

Vendor (mitre) PRIMARY
6.8 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
EUVD ID Assigned
Mar 15, 2026 - 14:04 euvd
EUVD-2025-200256
Analysis Generated
Mar 15, 2026 - 14:04 vuln.today
PoC Detected
Dec 08, 2025 - 19:42 vuln.today
Public exploit code
CVE Published
Dec 02, 2025 - 15:15 nvd
MEDIUM 6.8

DescriptionCVE.org

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader.

AnalysisAI

CVE-2025-59698 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public PoC available.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

More in Nshield 5c Firmware

View all
CVE-2025-59695 CRITICAL POC
9.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access to a
CVE-2025-59693 CRITICAL POC
9.8 Dec 02

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow
CVE-2025-59703 CRITICAL POC
9.1 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker
CVE-2025-59702 HIGH POC
7.2 Dec 02

A privilege escalation vulnerability (CVSS 7.2) that allows a physically proximate attacker with elevated privileges. Ri
CVE-2025-59697 HIGH POC
7.2 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker
CVE-2025-59705 MEDIUM POC
6.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker
CVE-2025-59699 MEDIUM POC
6.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker
CVE-2025-59694 MEDIUM POC
6.8 Dec 02

CVE-2025-59694 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public

CVE-2025-59704 MEDIUM POC
4.6 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the

CVE-2025-59701 MEDIUM POC
4.1 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker
CVE-2025-59700 LOW POC
3.9 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker
CVE-2025-59696 LOW POC
3.2 Dec 02

CVE-2025-59696 is a security vulnerability (CVSS 3.2) that allows a physically proximate attacker. Risk factors: public

Same weakness CWE-1270 – Generation of Incorrect Security Tokens

View all
CVE-2023-2882 CRITICAL
9.8
CVE-2023-22644 CRITICAL
9.4
CVE-2026-49499 HIGH
8.8
CVE-2026-19636 MEDIUM
6.0
CVE-2026-15831 MEDIUM
4.3
CVE-2023-30524 MEDIUM
4.3

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-59698 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy